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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with strik e through , except where strike- 
through cannot be easily perceived, in which case the text of any deleted subject matter is 
shown by being placed within double brackets, as provided in 37 C.RR § 1.121(c)(2). The 
status of each claim is indicated with one of (original), (currently amended), (cancelled), 
(withdrawn), (new), (previously presented), or (not entered). 

1-7. (Cancelled) 

8. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed mask values FMi^ . where q is an integer equal to three or more, wherein 
equations, FMo.h = ChXOR LIq (FMinh), and.Ch = Ch.i6Ch.i4...Ch,o, and D4 ^=-44t^4^TTr44^T are 
satisfied, where FMi.h is the i-th fixed value of the h-th set of said q sets of fixed mask v alues. 
where Fmlnh is a selected one of said fixed mask values, and w here i is an intege r and j is an 
i nt e g e r , 

q sets of fixed S-box tablev ataes. wherein equations, (coj XOR Cij) v (cij XOR C2j) v...v 
(Cq-2j XOR Cq-1 j) = (111 ... 11)2 and (doj XOR dij) v (di j XOR d2j) v...v (dq-2j XOR dq-ij) = 
(111 ... 11)2 are satisfied, a fixed tab teS-box table before masking Is defined as S[x], and I-th 
masked fixed tabt eS-box table is defined as Sjj,[xL5 Stfx X OR Cjj] XOR [[djj]] dryjor the j-th fixed 
value , where i is an integer : 

linear transform means L1i(x) and linear transform means L2j(x), wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed tabi eS-box table 
Sjjj [x] and the linear transform means L2i(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed mask 
values in response to the random number h, 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value^ 
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9-34. (Cancelled) 

35. (Previously presented) The encryption device according to claim 8, characterized 
in that the linear transform means L1i(x) is defined as L1j(x) = x. 

36. (Previously presented) The encryption device according to claim 8, characterized 
in that the linear transform means L2i(x) is defined as L2j(x) = MixedColumn(Shift(x)). 

37. (Previously presented) The encryption device according to claim 8, characterized 
in that the linear transform means L2j(x) is defined as Shift(x). 

38. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed mask values FMj j,. where q is an integer equal to t hree or more, wherein 
equations, FMj.h = C h XOR L1 i(L2i-1 (Dh)) for i^1 , C h = c h.isc h.i4. • . c h,o, and D h = d hjsd h.u- • • d h.o, 
are satisfied, where i is an integer-and-j is an int e g e r , 

q sets of fixed S^boxtaWe values, where equations, (coj XOR Cij)v(Cij XOR C2.j)v...v(Cq-2,j 
XOR Cq-ij) = (1111. ..11)2 and (doj XOR dij)v(dijXOR d2j)v ...v(dq-2jX0R dq-ij) = (1111. ..11)2, 
are satisfied, and a fixed tab teS-box table before masking is defined as S[x] and an i-th masked 
fixed tabt eS"box table is defined as Sjjj[xL5 I)lXOR Cjj] XOR dij for the j-th fixed value , where i is 
an integer : 

linear transform means L1i(x) and linear transform means L2j(x), wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed tab teS-box table 
Sjji [x] and the linear transform means L2|(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed mask 
values in response to the random number h; 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value. 

39. (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L1i(x) is defined as L1i(x) = x. 
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40. (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L2i(x) is defined as L2i(x) = 
MixedColumn(Shift(x)). 

41 . (Previously presented) The encryption device according to claim 38, 
characterized in that the linear transform means L2j(x) is defined as Shift(x). 

42-49. (Cancelled) 

50. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed mask v alues FMi h and q sots of fixed tab lo s . where q is an integer 
equal to three or more, wherein equations, FMo.h = ChXOR Llo (FMInh), and Ch = Ch iRChi£..,Chn. 
aft4-D4^=-d40^d4^^4^T are satisfied, where FMj,h is the i-th fixed value of the h-th set of said q 
sets of fixed mask values, where FMinn is a selected one of said fixed mask values, and w here i 
is an integer-a nd j is an int e g e r . 

q sets of fixed S-box table vakies, wherein equations[[,]] (coj XOR Cij) v (cij XOR C2,j) 
v,..v (Cq-2j XOR Cq-ij) = (11 1 . . . 1 1 )2 and (doj XOR dij) v (dij XOR dsj) v..„v (dq-2.j XOR dq-ij) = 
(111 ... 11)2 are satisfied, a fixed tabl eS-box table before masking is defined as S[x], and i-th 
masked fixed tabl eS-box table is defined as Sjji[xLf Ix.XOR c[[i]y XOR d[[j]]hj for the j-th fixed 
value , where i is an integer : 

a selector for selecting one of said q sets of fixed tabl eS-box table s in response to the 
random number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tabl eS-box table s: and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tabl eS-box table s, the selector, linear transform means 
LI i(x) and linear transform means L2i(x), for that round, and wherein the fixed tabl eS-box tables 
for said plurality of respective encrypting rounds are identical, and wherein the linear transform 
means L1i(x), the nonlinear transform means with the masked fixed table S-box table [x] and 
the linear transform means L2i(x) operate in that round. 
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51 . (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L1i(x) is defined as L1i(x) = x. 

52. (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2i(x) is defined as L2i(x) = 
MixedColumn(Shift(x)). 

53. (Previously presented) The encryption device according to claim 50, 
characterized in that the linear transform means L2i(x) is defined as Shift(x). 

54. (currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed mask v alues FMjj n, and q s e ts of fix e d tabl e s , where q is an integer 
equal to three or more, wherein equations, FMj^h = C hXOR L[[1]]2i(L[[2]]lM(Dh)) for i>1 , C h = c 
h,i5Ch.i4" .Ch,o, and Dh = dh.i5dh.i4...dh.o, are satisfied, where FMi h is the i-th fixed value of the h-th 
set of said q sets of fixed mask values, where i is an intege r and j is an - int e g e r , 

q sets of fixed S-box table vafaes, wherein equations, (coj XOR Cij) v (cij XOR Caj) v...v 
(Cq-2,j XOR Cq-ij) = (111 ... 11)2 and (doj XOR di.|) v (dij XOR dgj) v...v (dq-2j XOR dq-ij) = 
(111 ... 11)2 are satisfied, a fixed tabl eS-box table before masking is defined as S[x], and i-th 
masked fixed tabt eS-box table is defined as Sjjxl^ ix.XOR c[[i]]hj] XOR d[[i]]hj for the j-th fixed 
value , where i is an integer : 

a selector for selecting one of said q sets of fixed tabt eS-box table s in response to the 
random number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tabt eS-box table s: and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tabl eS-box table s, the selector, linear transform means 
L1j(x) and linear transform means L2i(x), for that round, and wherein the fixed tafe teS-box table s 
for said plurality of respective encrypting rounds are identical, and wherein the linear transform 
means L1i(x), the nonlinear transform means with the masked fixed tabl eS-box table Sj [x] and 
the linear transform means L2j(x) operate in that round. 
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55. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L1i(x) is defined as L1 j(x) = x. 

56. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2i(x) is defined as L2j(x) = 
MixedColumn(Shift(x)). 

57. (Previously presented) The encryption device according to claim 54, 
characterized in that the linear transform means L2i(x) is defined as Shift(x). 

58-63. (Cancelled) 

64. (currently amended) An encryption device comprising a random number 
generator for generating a random number h, where h is an integer between zero and q-1 , and a 
first plurality of encrypting rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed mask v alues FMj ^, where q is an integer equal to three or more, wherein 
equations, FMo.n = Ch XOR L1o (FMinh), and Ch = Ch.i5Ch.i4...Ch.o, aad-B^^=-4^44^TTTd^rare 
satisfied, where FMj.h is the i-th fixed value of the h-th set of said q sets of fixed mask v alues, 
where FMinn is a selected one of said fixed mask values, and i is an integer , 

q sets of fixed S-box tablev ataes, wherein equations, (coj XOR Cij) v (Ci j XOR Caj) v...v 
(Cq-2j XOR Cq-u) = (111 ... 11)2 and (doj XOR dij) v (dij XOR dzj) v...v (dq-2j XOR dq-ij) = 
(111 ... 11)2 are satisfied, a fixed tabt eS-box table before masking is defined as S[x], and i-th 
masked fixed tabt eS-box table is defined as Sjjj[xl5 Ix.XOR c[[i]]hj] XOR d[[j]]hj for the j-th fixed 
value , where i is an integer : 

a selector for selecting one of said q sets of fixed mask v alues in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 
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linear transform means L1i(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed tab teS-box table : 

linear transform means L2i(x), wherein the linear transform means L1i(x), the nonlinear 
transform means with the masked fixed tabl eS-box table S^, [x] and the linear transform means 
L2i(x) operate in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

65. (Previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L1j(x) is defined as L1i(x) = x. 

66. (Previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L2j(x) is defined as L2i(x) = 
MixedColumn(Shift(x)). 

67. (Previously presented) The encryption device according to claim 64, 
characterized in that the linear transform means L2i(x) is defined as Shift(x). 

68„ (currently amended) An encryption device comprising a random number 
generator for generating a random number h, where h is an integer between zero and q-1 , and a 
first plurality of encrypting rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed mask v alues FMi^ . where q is an integer equal to three or more, wherein 
equationsO FMi,h = Cn XOR L1i(L2i-1(Dh)) for i^1, Ch = Ch,i5Ch.i4...Ch,o. and Dh = dh.isdh.u.-d 
h,o, are satisfied, where FMj.h is the i-th fixed value of the h-th set of said q sets of fixed mask 
values , wh e r e j is an integer , 

q sets of fixed S-box tablev atoes, wherein equations[[,]] (Coj XOR Ci j) v (Ci j XOR C2j) 
V...V (Cq~2j XOR Cq^u) = (111 ...11)2 and (doj XOR dij) v (dij XOR dsj) v...v (dq-2j XOR dq-ij) = 
(111 ... 11)2 are satisfied, a fixed tab teS-box table before masking is defined as S[x], and i-th 



9 



Serial No. 10/028,265 

masked fixed tabl eS-box table is defined as Sjj,[xLf Jx^XOR c[[i]]hj] XOR d[[i]]hj for tlie j-tli fixed 
value , where i is an integer : 

a selector for selecting one of said q sets of fixed mask v alues in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1j(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed tabl eS-box table : 

linear transform means L2j(x), wherein the linear transform means L1i(x), the nonlinear 
transform means with the masked fixed ta ^S-box table % [x] and the linear transform means 
L2i(x) operate in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

69. (Previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L1j(x) is defined as L1j(x) = x. 

70. (Previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L2j(x) is defined as L2i(x) = 
MixedColumn(Shift(x)). 

71 . (Previously presented) The encryption device according to claim 68, 
characterized in that the linear transform means L2|(x) is defined as Shift(x). 

72. (currently amended) A program stored on a computer or machine-readable 
storage medium for use in an encryption device, said program operable to effect the steps of: 

selecting one set of q sets of fixed mask v alues FMih . where q is an integer equal to 
three or more, in response to a random number h, where h is an integer between zero and q-1 ; 

XORing an input value with an XOR of a key with said selected fixed value in i-th one of 
rounds, wherein equations, FMo.h = On XOR Llo (FMinh)T^ Ch = Ch.i5Ch.i4...Ch.o, afid-0„"=^4^4 
M4^-Mrare satisfied, where FMj,h is the I-th fixed value of the h-th set of said q sets of fixed 
mask v alues, where FMinh is a selected one of said fixed mask values and w here i is an integer 
and j is an int e ger ; 

selecting one set Sjj, [x] of q sets of masked fixed tebl eS-box table s in response to the 
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random number h in that round, wherein equations, (coj XOR Cij) v (cij XOR C2j) v...v (Cq-2.j XOR 
Cq-ij) = (111 ... 11)2 and (doj XOR dij) v (dij XOR daj) v...v (dq-2.] XOR dq-ij) = (111 ... 11)2 are 
satisfied, a fixed tafel eS-box table before masking is defined as S[x], and i-th masked fixed 
ta^i eS-box table is defined as Sjji[xl5 \xXOR cl[i]]hj] XOR d[[i]]hj for the j-th fixed value , where i 
is an integer : 

nonlinearly transforming an input value in accordance with said selected set Sjjj [x] of 
fixed tabt eS-box table s in that round; and 

linearly transforming an input value and the nonlinearly transformed value in that round. 
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